github/containerd
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity
10,101 Commits 3 Branches 2 Tags 112 MiB
86d52fc265
Commit Graph

10101 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
AdamKorcz
86d52fc265 Fuzzing: refactor metadata fuzzers 
Signed-off-by: AdamKorcz <adam@adalogics.com>
 2022-01-11 21:23:46 +00:00
Akihiro Suda
35b96f9b1c
Merge pull request #6415 from dmcgowan/contrib-apparmor-cleanup 
Update error message for apparmor parser
 2022-01-10 16:40:57 +09:00
Fu Wei
e4bf68633e
Merge pull request #6419 from sachaos/feature/fix-wrong-log-message 2022-01-09 22:50:32 +08:00
Takumasa Sakao
18592b2f5a Fix wrong log message 
Signed-off-by: Takumasa Sakao <tsakao@zlab.co.jp>
 2022-01-09 16:01:23 +09:00
Derek McGowan
ee326447e5
Merge pull request #6414 from dmcgowan/followup-errors-change 
Followup errors change
 2022-01-08 10:07:34 -08:00
Derek McGowan
468513820d
Merge pull request #6351 from adisky/update-k/k-1.23 
Updates CRI API & Kubernetes to 1.23
 2022-01-07 15:26:44 -08:00
Derek McGowan
9028832e41
Merge pull request #6416 from marosset/adopters-azure 
Updating adoption of containerd for AKS
 2022-01-07 15:07:28 -08:00
Mark Rossetti
e38946d865 Updating adoption of containerd for AKS 
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
 2022-01-07 14:01:54 -08:00
Derek McGowan
c124253e05
Merge pull request #6413 from SergeyKanzhelev/patch-1 
update the adoption status of containerd in GKE
 2022-01-07 13:40:01 -08:00
Derek McGowan
647308bc47
Merge pull request #6410 from AkihiroSuda/update-go-mod-20220107 
go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt}
 2022-01-07 12:34:44 -08:00
Derek McGowan
8aca314ddb
Update error message for apparmor parser 
Signed-off-by: Derek McGowan <derek@mcg.dev>
 2022-01-07 12:31:02 -08:00
Derek McGowan
48c7529de2
Fix incorrect error wrapped when closing ingest file 
Signed-off-by: Derek McGowan <derek@mcg.dev>
 2022-01-07 12:23:18 -08:00
Derek McGowan
0c2c289d4c
Fix seek error used without nil check 
Signed-off-by: Derek McGowan <derek@mcg.dev>
 2022-01-07 12:19:23 -08:00
Derek McGowan
8816006d1e
Fix followup items from errors replacement 
Signed-off-by: Derek McGowan <derek@mcg.dev>
 2022-01-07 12:16:00 -08:00
Derek McGowan
77d53d2d23
Merge pull request #6366 from jonyhy96/feat-errors-replace 
replace github.com/pkg/errors with native errors
 2022-01-07 12:13:29 -08:00
Sergey Kanzhelev
a94f32ce06 update the adoption status of containerd in GKE 
Signed-off-by: Sergey Kanzhelev <S.Kanzhelev@live.com>
 2022-01-07 20:08:10 +00:00
Derek McGowan
72d2913c81
Merge pull request #6412 from jklippel/correct-link-in-documentation 
corrected link in cri architecture documentation
 2022-01-07 09:04:25 -08:00
Jan Klippel
4f0f363504 corrected link in cri architecture documentation 
The referenced document was moved into the staging directory within the kubernetes repository

Signed-off-by: Jan Klippel <g1thub@kl1pp3l.de>
 2022-01-07 14:58:37 +01:00
Akihiro Suda
d3724a6c17
go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} 
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2022-01-07 18:54:15 +09:00
haoyun
bbe46b8c43 feat: replace github.com/pkg/errors to errors 
Signed-off-by: haoyun <yun.hao@daocloud.io>
Co-authored-by: zounengren <zouyee1989@gmail.com>
 2022-01-07 10:27:03 +08:00
Derek McGowan
3ccd43c8f6
Merge pull request #6396 from AkihiroSuda/refresh-token 
remotes/docker: allow fetching "refresh token" (aka "identity token", "offline token")
 2022-01-06 11:34:38 -08:00
Derek McGowan
857b35de6c
Merge pull request #6407 from dmcgowan/prepare-1.6.0-beta.5 
Prepare release notes for v1.6.0-beta.5
 2022-01-06 09:16:54 -08:00
Aditi Sharma
e43d4206af Update k/k to 1.23.0 
Signed-off-by: Aditi Sharma <adi.sky17@gmail.com>
 2022-01-06 11:18:23 +05:30
Derek McGowan
8d5af6be80
Prepare release notes for v1.6.0-beta.5 
Signed-off-by: Derek McGowan <derek@mcg.dev>
 2022-01-05 12:05:49 -08:00
Phil Estes
1b8af3752d
Merge pull request #6292 from aznashwan/windows-integration-conditional-artefact-upload 
Integration: Check GCP secrets on Windows CI artifact upload.
 2022-01-05 12:37:40 -05:00
Derek McGowan
644a01e13b
Merge pull request from GHSA-mvff-h3cj-wj9c 
only relabel cri managed host mounts
 2022-01-05 09:30:58 -08:00
Derek McGowan
8937012208
Merge pull request #5439 from marquiz/devel/rdt 
Add support for Intel RDT
 2022-01-04 10:15:25 -08:00
Markus Lehtonen
9c2e3835fa cri: add ignore_rdt_not_enabled_errors config option 
Enabling this option effectively causes RDT class of a container to be a
soft requirement. If RDT support has not been enabled the RDT class
setting will not have any effect.

Signed-off-by: Markus Lehtonen <markus.lehtonen@intel.com>
 2022-01-04 09:27:54 +02:00
Markus Lehtonen
eba1048163 Update dependencies 
Signed-off-by: Markus Lehtonen <markus.lehtonen@intel.com>
 2022-01-04 09:27:54 +02:00
Markus Lehtonen
f4a191917b cri: annotations for controlling RDT class 
Use goresctrl for parsing container and pod annotations related to RDT.

In practice, from the users' point of view, this patchs adds support for
a container annotation and two separate pod annotations for controlling
the RDT class of containers.

Container annotation can be used by a CRI client:
  "io.kubernetes.cri.rdt-class"

Pod annotations for specifying the RDT class in the K8s pod spec level:
  "rdt.resources.beta.kubernetes.io/pod"
  (pod-wide default for all containers within)

  "rdt.resources.beta.kubernetes.io/container.<container_name>"
  (container-specific overrides)

Annotations are intended as an intermediate step before the CRI API
supports RDT.

Signed-off-by: Markus Lehtonen <markus.lehtonen@intel.com>
 2022-01-04 09:27:54 +02:00
Markus Lehtonen
eae14688c6 tasks: add Linux rdt support 
Add support for configuring the Linux resctrl pseudo-filesystem with
goresctrl library. The functionality is integrated in the
"io.containerd.service.v1.tasks-service" plugin.

Signed-off-by: Markus Lehtonen <markus.lehtonen@intel.com>
 2022-01-04 09:27:54 +02:00
Markus Lehtonen
9e755d12e2 cmd: add --rdt-class command line option 
A new option for setting the RDT class (or CLOS) from the command line.

Signed-off-by: Markus Lehtonen <markus.lehtonen@intel.com>
 2022-01-04 09:27:54 +02:00
Markus Lehtonen
2946db8903 oci: implement WithRdt 
Helper for setting the (Linux) container's RDT parameters.

Signed-off-by: Markus Lehtonen <markus.lehtonen@intel.com>
 2022-01-04 09:27:54 +02:00
Fu Wei
4045b7ce86
Merge pull request #6391 from jonyhy96/fix-placeholder 2022-01-04 15:23:52 +08:00
Fu Wei
fcf956a9e1
Merge pull request #6403 from tklauser/timespec-unix 2022-01-04 15:23:13 +08:00
Derek McGowan
07aa42f427
Merge pull request #6207 from marquiz/devel/docs 
docs: improve plugin documentation
 2022-01-03 13:20:29 -08:00
Derek McGowan
bf60e2d174
Merge pull request #6304 from lippertmarkus/fix-ctr-cni-windows 
fix(ctr): enable networking for Windows containers
 2022-01-03 10:47:44 -08:00
Tobias Klauser
df21828d27
content/local: use syscall.Timespec.Unix 
Use the syscall method instead of repeating the type conversions for
the syscall.Stat_t Atim/Atimespec members. This also allows to drop the
//nolint: unconvert comments.

Signed-off-by: Tobias Klauser <tklauser@distanz.ch>
 2022-01-03 12:37:25 +01:00
Fu Wei
ff7fd4eb2e
Merge pull request #6394 from dcantah/fix-makefile 2021-12-30 09:17:21 +08:00
Fu Wei
3ab676ce22
Merge pull request #6395 from jonyhy96/fix-abstract 2021-12-28 18:13:34 +08:00
haoyun
85326d76f4 fix: only test abstract unix socket on linux 
Signed-off-by: haoyun <yun.hao@daocloud.io>
 2021-12-28 17:07:19 +08:00
Nashwan Azhari
90426378e3 Integration: Check GCP secrets on Windows CI artifact upload. 
This patch makes the Windows Integration GitHub workflow conditionally
execute the CI artifact upload to GCP on successful runs iff the GitHub
secrets containing the GCP access info are defined.

Signed-off-by: Nashwan Azhari <nazhari@cloudbasesolutions.com>
 2021-12-27 19:15:46 +02:00
Akihiro Suda
97623ab0cd
remotes/docker: allow fetching "refresh token" (aka "identity token") 
The new AuthorizerOpt `WithFetchRefreshToken` allows fetching "refresh token"
(aka "identity token", "offline token").

For HTTP GET mode (`FetchToken`), `offline_token=true` is set in the request.
https://docs.docker.com/registry/spec/auth/token/#requesting-a-token

For HTTP POST mode (`FetchTokenWithOAuth`), `access_type=offline` is set in the request.
https://docs.docker.com/registry/spec/auth/oauth/#getting-a-token

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2021-12-27 15:19:45 +09:00
Akihiro Suda
1a078e6893
Merge pull request #6390 from gabriel-samfira/fix-restart-container-test 
Fix restart container test
 2021-12-24 18:29:57 +09:00
Akihiro Suda
8094f50dd0
remotes/docker/config: allow setting custom AuthorizerOpts 
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2021-12-24 18:17:40 +09:00
Daniel Canter
8e6afaa207 Fix $(PWD) issue for Windows makefile 
Seems $(PWD) if the shell is powershell may not be inherited properly
as it ends up being an empty string. The result of this is that using
mingw's make with powershell is that $(PWD)/bin ends up being /bin and the
windows shim will get placed there. make install afterwards will try to find
the shim at $pwd/bin and fail.

Changing to CURDIR https://www.gnu.org/software/make/manual/make.html#index-CURDIR
seems to be a solution here as it's not inherited by the environment and
is set by make itself so should work across any type of shell.

Signed-off-by: Daniel Canter <dcanter@microsoft.com>
 2021-12-21 09:02:30 -05:00
Gabriel Adrian Samfira
653b8b02ad
Expect ErrorNotFound on Windows after Kill() 
The "notready-sandbox" array will only have a CONTAINER_CREATED
and a CONTAINER_EXITED in the sandbox. So there will be no running
task to send a Kill() to. This means that on Windows, it will always
return an ErrorNotFound.

Signed-off-by: Gabriel Adrian Samfira <gsamfira@cloudbasesolutions.com>
 2021-12-21 11:17:49 +02:00
haoyun
ac81297065 fix: use _ for consistency 
Signed-off-by: haoyun <yun.hao@daocloud.io>
 2021-12-21 14:28:47 +08:00
Markus Lippert
f39b3ac7ea fix(ctr): enable networking for Windows containers 
Signed-off-by: Markus Lippert <lippertmarkus@gmx.de>
 2021-12-21 07:13:39 +01:00
Michael Crosby
653f2f1ce4
Merge pull request #6291 from ningmingxiao/dev1 
fix when kernel version < 4.13rc1 by using index=off cause test error
 2021-12-20 14:24:54 -05:00